Cisco DPC, Руководство пользователя

Страница: 62 / 132

62 4024320 Rev A
How Do I Configure My DOCSIS Residential Gateway?
Field Name Description
Identity Allows you to enter the identity string after you have selected the
identity type using one of the following formats:
ƒ
For IP address mode use the format xxx.xxx.xxx.xxx
ƒ
For FQDN use the format "yourdomain.com"
ƒ
For email address u se the format "yourname@yourdomain.com"
The remote VPN endpoint on the other end of the tunnel should match
these settings for its remote endpoint settings
Network address
type Allows you to enter the address type for the endpoint WAN. Choose
one of the following options:
ƒ
IP address
ƒ
FQDN
Remote address Allows you to enter either the IP address or the FQDN of the remote
endpoint depending on what Network Address type you selected
IPsec Settings
With VPN tunnels there are two phases of Security Association (SA).
Phase 1 creates an Internet Key Exchange (IKE) SA
When Phase 1 is complete, Phase 2 creates one or more IPsec SAs that are then
used to key IPsec sessions
Field Description
Pre-shared key Allows you to enter the Pre-shared key of the firewall identifier if one
side of the VPN tunnel is using a unique firewall
Phase 1 DH group Allows you to select one of following three Diffie-Hellman (DH)
encryption/decryption groups:
ƒ
768 bits
ƒ
1024 bits
ƒ
1536 bits
Diffie-Hellman is a cryptographic technique that uses public and
private keys for encryption and decryption. The higher number of bits
selected, the more secure the connection